Rouge DHCP servers

General Networking
1

I wish the the UISP version of Edgerouter supported Rouge DHCP Guarding that Unifi supports. EdgeRouter is dead it seems. I deal with this constantly as a wisp owner. Mainly at my Air B&B customers. Its a bit*h to locate these devices. In Willie’s video Unifi has an option to prevent it, DHCP Guarding.

UISP routers do not have this function, and one would think that this would be a function that is most necessary for smooth operations for a WISP. Even the new UISP Router does not have this function.

If you ever feel that you have a rouge DHCP server on your network, here is a quick way to find it. Shame on Ubiquiti for lacking in good tools.

Get a Mikrotik switch, open DHCP Server, add a single alert, it’ll tell you almost everything you need to know about the Rouge DHCP Server. I’ve spent hours with wireshark, looking for it until my eyes bled, but Mikotik makes it so easy. Cant wait to get my Mikrotik router in place of the Edgerouter for more control. I hope Ubiquiti gets onboard soon, I think a lot of people are frustrated with them on the UISP side, being that there has been little to no development for 3-4 years now, as we watch the Unifi side blow up. If I remember correctly, Edge(Max)(Router)(Switch) was what made Ubiquiti what it is now.

1 Like
2

Routers don’t block rogue DHCP servers, switches do. Thanks for bringing this topic up! There are a lot of switches that will do this – curiously enough I never got it to work on an EdgeSwitch… …

3

Same here. Most of the time when I turn on snooping, the network drops.

4

I really like how powerful Mikrotik switch/routers are. The only place I think they need more development is wifi and wizards, the powerful comes at a cost and that is ease of programming.

5

They can be difficult to learn, but if you compare it Ubiquiti, you get can down and dirty with everything about the device, at a much more complicated level. UI has made the interface to simple, and has pushed more advanced options in the CLI, where as the Mikrotik list’s those options in the web UI or Winbox, as well as the CLI…